General

  • Target

    bOEU.exe

  • Size

    32KB

  • MD5

    5fae1fc204f85528336f435f2af78c5b

  • SHA1

    6e8b3b6064269f4d8c98375380232e736842eb7b

  • SHA256

    d7443e8971985f4cbd75219edfdedde221be125432c421d6b0d1537f7d8b36d5

  • SHA512

    e09a47f0742fecb7ab94148708f88ced11ca3abb5e60ef3559638e2df2acdcf036847fbbc2c325c8dc9ed82f63bba2c88b5a57536665f59efaa772f7f9bceb70

  • SSDEEP

    384:00bUe5XB4e0X+OSSCixBr/QZWTGtTUFQqzF5Obb+:RT9BudS9ifrYPPb+

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

estreno1-caso.duckdns.org:2525

Mutex

55b565ac97f14798

Attributes
  • reg_key

    55b565ac97f14798

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bOEU.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections